Privacy Policy

Last updated: 23 October 2026

This policy explains how the personal data of people who visit the website www.alessandrorinaldi.com or contact us through it are processed, pursuant to articles 13 and 14 of Regulation (EU) 2016/679 (GDPR).

1. Data controller

Alessandro Rinaldi, Via Monsignor Marinozzi 20, 62010 Pollenza (MC), Italy. Email: rinaldiale324@gmail.com.

2. What data we collect

Browsing data

The systems that run the website automatically record some technical data, such as IP address, browser type, pages visited, date and time of the request. They are used to run the website, keep it secure and, only with your consent, produce anonymous statistics.

Data you provide

When you use the contact form or write by email you give us your name, email address, the content of the message and any other data you choose to include. Please do not send special categories of data (for example about health) unless strictly necessary.

Cookies

The website uses technical cookies and, only with your consent, statistics cookies. Details are in the Cookie Policy.

3. Why we process data and on what legal basis

Purpose	Data	Legal basis
Replying to requests sent through the form or by email	Name, email, message	Request of the data subject and pre-contractual measures (art. 6.1.b GDPR)
Protecting the form from spam and abuse (Google reCAPTCHA)	Browsing data	Legitimate interest in website security (art. 6.1.f GDPR)
Running the website and keeping it secure	Browsing data, technical cookies	Legitimate interest (art. 6.1.f GDPR)
Aggregate statistics on visits (Google Analytics 4)	Browsing data, statistics cookies	Consent (art. 6.1.a GDPR), which can be withdrawn at any time
Complying with legal obligations and defending our rights	Data needed in the specific case	Legal obligation (art. 6.1.c) and legitimate interest (art. 6.1.f GDPR)

Providing data in the contact form is optional, but without name, email and message we cannot reply.

4. How we process data

Data are processed with IT tools, with security measures suitable to prevent loss, unlawful use or unauthorised access. We do not take decisions based solely on automated processing and we do not use data for profiling or advertising.

5. Who we share data with

Data are not disclosed to the public or sold. They may be processed on our behalf, and only for the purposes stated, by the following providers:

Provider	Service	Location / transfer
Hostinger	Website hosting (servers, technical logs)	United Kingdom / European Union. The United Kingdom is recognised by the European Commission as providing adequate protection.
Google Ireland Limited	Google reCAPTCHA (form security)	Ireland, with possible transfer to the United States (EU-U.S. Data Privacy Framework)
Google Ireland Limited	Google Analytics 4 (statistics, only with consent)	Ireland, with possible transfer to the United States (EU-U.S. Data Privacy Framework)
Google Ireland Limited	Google Fonts (typefaces)	Ireland, with possible transfer to the United States (EU-U.S. Data Privacy Framework)
Google Ireland Limited	Gmail (receiving emails and form messages)	Ireland, with possible transfer to the United States (EU-U.S. Data Privacy Framework)

Data may also be disclosed to the competent authorities when required by law.

6. How long we keep data

• Contact form messages and emails: for the time needed to handle the request and then up to 24 months from the last contact, unless they become necessary for an ongoing relationship or legal obligations.
• Browsing data and technical logs: for the time strictly necessary for the security of the service, according to the hosting provider’s settings.
• Google Analytics statistics: 2 months, then deleted automatically.
• Cookie consent log: 24 months.
• Cookies: for the duration stated in the Cookie Policy.

7. Your rights

At any time you can request:

• access to your data and a copy of it (art. 15 GDPR);
• rectification of inaccurate data (art. 16);
• erasure (art. 17) or restriction of processing (art. 18);
• portability of the data you provided (art. 20);
• to object to processing based on legitimate interest (art. 21);
• to withdraw consent, without affecting processing already carried out (art. 7.3). For cookies you can do this from the “Cookie preferences” link at the bottom of every page.

To exercise your rights write to rinaldiale324@gmail.com. We will reply within one month.

If you believe the processing breaches the GDPR you can lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the authority of the country where you live or work.

8. Children

The website is not directed at children under 14 and we do not knowingly collect their data.

9. Changes to this policy

This policy may be updated. The date of the last update is shown at the top; substantial changes will be highlighted on the website.